Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: n7/x8BwORCc3FI0i8i5hypFWX5gE7HnQJnQu1aNVQMU=
Subject key identifier: 73:11:DD:5D:E7:DA:57:E9:E3:26:D5:C6:9E:15:10:E5:30:4E:77:D1
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 019CAA587C135FCB4D2263AC56921BBFA9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0550
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: gUzxibyLU3eb0Fb7OM+bdfF0M8ofX43yVe4WewQuRPY=)
2: B1xsgML2xDaRQYkGxUtabnWxmGY.roa (hash: +xPFhEuCza9EAaqJyGgj1UH0V5vl/QcBkrNeZ95rHj4=)
3: WOH-dDFILdAlNDw8JowUyaFPvJw.roa (hash: OCSDelJnuET1EEoYclmA8O4BqfKPKxqqfnyLODL87wk=)
4: X4JSAl7mEoJyzznkY14VbNv09k8.roa (hash: j50w3dwHk0KiPncH2Bx9DQIkaE9cvvACV1hP4QRJhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7c:13:5f:cb:4d:22:63:ac:56:92:1b:bf:a9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=7311dd5de7da57e9e326d5c69e1510e5304e77d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:74:27:03:4a:c8:70:ad:31:47:6e:37:a0:
13:c4:fb:7d:91:39:e4:3a:80:59:73:5f:3b:66:72:
f3:7f:d9:79:22:79:25:b8:eb:a7:01:b7:5a:08:7a:
63:c1:bc:e4:06:33:43:75:5f:12:26:87:d1:19:94:
8c:5f:4d:3c:80:11:ed:ba:ed:4e:26:f3:35:b6:de:
cc:16:4e:94:2c:96:f9:5a:b4:62:28:64:49:7e:fc:
3d:42:cf:70:9d:dd:a3:4e:b8:8a:56:2d:25:43:96:
b5:8d:81:46:2a:c1:79:2d:f6:05:0f:23:c6:83:30:
3b:eb:8d:f4:49:8f:dc:80:97:2e:44:e7:45:fe:90:
62:8a:f3:76:8a:a7:71:57:dd:b4:18:42:61:5d:a6:
f3:8a:90:48:7e:bd:6b:83:9c:37:2e:f3:0e:39:bd:
ed:d8:ce:72:70:b3:3d:90:33:22:4e:4f:96:49:59:
fa:69:b9:7f:bc:fe:9d:35:37:73:77:5b:57:71:8c:
49:8c:7c:79:1e:a9:03:ea:02:14:a7:15:07:be:d0:
3a:89:b3:22:c7:9a:18:d7:40:d7:04:b7:71:e2:20:
ee:57:57:82:90:db:53:d7:03:26:b9:59:f4:0f:6e:
f5:23:1e:df:35:47:45:56:5a:66:6f:2e:ba:27:71:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:11:DD:5D:E7:DA:57:E9:E3:26:D5:C6:9E:15:10:E5:30:4E:77:D1
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:e0:03:4a:d9:a9:9c:dc:92:70:82:34:d2:bd:6b:cb:76:
6a:cc:99:5f:1f:d7:d3:45:fa:d8:87:11:04:ca:18:fb:a5:73:
43:d4:5a:f8:d6:b8:ee:de:29:6b:c5:ca:01:ad:8c:f7:40:8a:
45:2a:7f:29:34:07:99:dc:dd:bf:db:f2:17:db:d1:92:27:ce:
2e:28:af:f0:8f:30:a8:4c:30:ad:8c:9b:42:75:4f:a6:fa:ef:
52:22:f6:6d:41:34:40:39:4f:c5:3f:89:00:72:1a:f4:33:92:
33:61:62:3c:5e:18:02:47:fa:96:e9:19:c0:91:e7:23:fc:cd:
25:ce:4c:35:9f:a3:98:5e:8d:04:db:79:da:db:7c:81:18:30:
33:81:42:41:c7:8c:e3:82:cf:a3:77:0b:1c:06:3c:b5:e0:b3:
23:ad:53:5b:f1:dc:91:e0:9c:f6:d4:e8:b2:0f:00:07:7f:1c:
9b:12:7b:f1:63:7e:cd:73:f8:35:14:d7:87:d6:e2:a5:db:81:
57:ae:f0:85:b4:26:56:2b:e9:90:73:9a:92:89:84:64:d9:7d:
1e:c6:b3:fe:4f:d5:7d:13:3c:67:c2:30:e2:0d:ef:b9:24:15:
82:e9:a8:bf:9e:ec:0a:f0:ef:ad:76:fc:4d:ae:53:0c:2b:be:
8e:8e:9a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:55 2026 by rpki-client